Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
File: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft (raw, json)
Hash identifier: l+MtfO3QsfV4tWrbXgiJcE4SdT1HHCsuRZAMtcPX+Oc=
Subject key identifier: EB:4F:48:E0:65:70:CA:81:5D:32:7B:25:33:50:16:FF:AB:15:EC:31
Authority key identifier: D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
Certificate issuer: /CN=d81d42aae019e4ea44a616378eb66b389de8c511
Certificate serial: 019675306BB4BF5A91D262D69768D007F47C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
Manifest number: 0B9C
Signing time: Sun 27 Apr 2025 03:00:29 +0000
Manifest this update: Sun 27 Apr 2025 03:00:29 +0000
Manifest next update: Mon 28 Apr 2025 03:00:29 +0000
Files and hashes: 1: 1SW-2xi11V63HCREW8hUdL3tZmw.roa (hash: cOv7Oi38iBDrDb9WZ2Ip3z9u0lLKK3yHhjWLwQyWMKM=)
2: 2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl (hash: MyzjuVW4Bt2Nra287W7+Jh2kJ6H1ZUs6+sHY9aVEdpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:75:30:6b:b4:bf:5a:91:d2:62:d6:97:68:d0:07:f4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d81d42aae019e4ea44a616378eb66b389de8c511
Validity
Not Before: Apr 27 03:00:29 2025 GMT
Not After : Apr 28 03:00:29 2025 GMT
Subject: CN=eb4f48e06570ca815d327b25335016ffab15ec31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:98:6e:40:6b:d3:5f:fb:a0:f6:f3:b2:5b:81:
19:47:20:ec:05:c0:8a:12:b4:05:c9:80:0e:23:76:
89:3b:9b:8d:3f:fa:8d:88:f5:74:da:05:80:4f:18:
6f:1d:a1:47:7c:99:be:09:7c:cb:78:c8:d5:66:06:
17:85:3d:81:a1:72:14:c0:63:18:db:f4:65:7d:a6:
6b:0a:09:5e:e8:77:55:79:e5:b5:b7:68:49:0b:ad:
bc:f8:d9:01:06:8a:29:2a:53:8d:64:a3:98:e9:1a:
16:22:65:66:5d:7c:8e:3c:ca:c4:35:8d:18:7d:e7:
94:6d:e5:aa:a9:7f:50:15:4f:22:3b:0f:2b:8d:30:
4f:1e:5e:68:53:ad:49:12:d8:75:76:c0:57:2e:52:
e5:82:cc:d5:e5:9b:7e:9e:5a:e9:4f:63:7b:3d:d3:
7c:65:ee:a3:6b:54:7d:50:8f:de:80:e4:0c:a6:91:
1c:a0:9b:1d:12:70:4c:a3:ee:da:af:dc:d6:b6:98:
d1:7d:7d:6c:e7:d6:79:4d:c7:9c:19:ff:55:7e:47:
12:5c:21:a1:27:8f:54:74:81:d0:a9:6a:75:9c:f4:
8a:80:50:5d:92:47:13:9e:28:3f:d2:c8:a4:e0:4a:
38:81:e8:85:97:27:03:77:87:4e:59:bd:1f:0b:cc:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:48:E0:65:70:CA:81:5D:32:7B:25:33:50:16:FF:AB:15:EC:31
X509v3 Authority Key Identifier:
keyid:D8:1D:42:AA:E0:19:E4:EA:44:A6:16:37:8E:B6:6B:38:9D:E8:C5:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2B1CquAZ5OpEphY3jrZrOJ3oxRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1c7c09-e02c-4cbf-9e67-9685555190c4/1/2B1CquAZ5OpEphY3jrZrOJ3oxRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ed:de:4e:84:a9:64:74:74:68:5e:67:08:da:29:57:7a:6e:
ec:7b:21:f4:90:d9:b9:9d:8d:cd:90:2a:3c:30:56:0b:c3:23:
e5:e2:53:92:c9:cb:25:ac:0d:5d:00:6c:33:ef:1d:92:54:b0:
57:a9:34:6f:ca:5b:55:a2:7b:89:07:47:2a:4d:33:0a:c3:1b:
79:9f:a4:33:d3:ef:6b:18:a3:a8:9e:d3:fd:38:35:00:50:39:
fb:ca:e6:49:16:60:95:c4:9e:ea:90:6d:f7:57:2b:d5:00:7e:
2a:3f:73:0a:be:36:38:c6:11:8c:2e:07:22:6c:b3:e5:4d:70:
b6:6c:2d:6d:00:93:b1:57:4c:02:ee:81:a5:79:0b:29:08:87:
8f:43:a6:66:87:79:44:18:ec:28:f9:c5:09:1c:5c:8d:36:12:
c0:a9:c9:7d:96:a5:4e:da:6b:f1:ac:23:f8:3a:bf:88:bd:a0:
4e:9d:28:c8:b7:a6:4b:98:9d:46:6a:1a:6c:a9:2a:cf:6c:ed:
c1:d2:de:d8:66:38:11:3a:41:49:46:a5:3b:b0:19:90:9d:d1:
ed:51:be:bf:7c:12:73:27:37:ba:c1:66:b0:7d:7d:db:9c:b0:
3c:3a:46:9c:f5:ad:53:67:ee:58:93:b6:a4:31:72:f9:4c:52:
4a:39:19:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZ1MGu0v1qR0mLWl2jQB/R8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4MWQ0MmFhZTAxOWU0ZWE0NGE2MTYzNzhlYjY2YjM4OWRl
OGM1MTEwHhcNMjUwNDI3MDMwMDI5WhcNMjUwNDI4MDMwMDI5WjAzMTEwLwYDVQQD
EyhlYjRmNDhlMDY1NzBjYTgxNWQzMjdiMjUzMzUwMTZmZmFiMTVlYzMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJhuQGvTX/ug9vOyW4EZRyDsBcCK
ErQFyYAOI3aJO5uNP/qNiPV02gWATxhvHaFHfJm+CXzLeMjVZgYXhT2BoXIUwGMY
2/RlfaZrCgle6HdVeeW1t2hJC628+NkBBoopKlONZKOY6RoWImVmXXyOPMrENY0Y
feeUbeWqqX9QFU8iOw8rjTBPHl5oU61JEth1dsBXLlLlgszV5Zt+nlrpT2N7PdN8
Ze6ja1R9UI/egOQMppEcoJsdEnBMo+7ar9zWtpjRfX1s59Z5TcecGf9VfkcSXCGh
J49UdIHQqWp1nPSKgFBdkkcTnig/0sik4Eo4geiFlycDd4dOWb0fC8w7uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtPSOBlcMqBXTJ7JTNQFv+rFewxMB8GA1UdIwQY
MBaAFNgdQqrgGeTqRKYWN462azid6MURMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjct
OTY4NTU1NTE5MGM0LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS8xYzdjMDktZTAyYy00Y2JmLTllNjctOTY4NTU1NTE5MGM0
LzEvMkIxQ3F1QVo1T3BFcGhZM2pyWnJPSjNveFJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJe3eToSp
ZHR0aF5nCNopV3pu7Hsh9JDZuZ2NzZAqPDBWC8Mj5eJTksnLJawNXQBsM+8dklSw
V6k0b8pbVaJ7iQdHKk0zCsMbeZ+kM9PvaxijqJ7T/Tg1AFA5+8rmSRZglcSe6pBt
91cr1QB+Kj9zCr42OMYRjC4HImyz5U1wtmwtbQCTsVdMAu6BpXkLKQiHj0OmZod5
RBjsKPnFCRxcjTYSwKnJfZalTtpr8awj+Dq/iL2gTp0oyLemS5idRmoabKkqz2zt
wdLe2GY4ETpBSUalO7AZkJ3R7VG+v3wScyc3usFmsH1925ywPDpGnPWtU2fuWJO2
pDFy+UxSSjkZQA==
-----END CERTIFICATE-----
Generated at Sun Apr 27 11:16:52 2025 by rpki-client